PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

CVE-2024-10382: Arbitrary code execution in Android Auto and various apps

calif.io | vulnerability | CVE-2024-10382 | #vulnerability-research | #android | #automotive | #code-execution | #cve-2024-10382 | #auto-security
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

# CVE-2024-10382: Arbitrary code execution in Android Auto and various apps One library, many apps, and code execution in all of them. Khanh Pham and Linh Le December 18, 2024 android Contents 1....
CVE
CVE-2024-10382
Published
Collected

Related coverage

vulnerability · bughunters.google.com
Capturing the Flags of the Internet: Find 0-days in OSS and write scanners to detect them
InternetCTF offers rewards up to $10,000 for bug hunters who discover novel code execution vulnerabilities in open source software and submit matching Tsunami scanner plugin patches.
Critical · vulnerability · xbow.com
Beyond the Bands: Exploiting TiTiler’s Expression Parser for Remote Code Execution
A methodical study of TiTiler's expression parser that ends in arbitrary Python code execution on the server, with a bonus arbitrary file read saved for a follow-up post.
vulnerability · hackerone.com
General Motors Celebrates Long-Term Success With Hackers
General Motors, the first major automaker with a public VDP, has resolved 700+ vulnerabilities with 500+ hackers since 2016, praising the security research community's role across its supply chain.
vulnerability · bugcrowd.com
VRT v1.10 Released: Flash downgrades and extended automotive categorization
Bugcrowd released VRT v1.10: new automotive categories from its Stellantis partnership, Flash entries downgraded to P5 after end of life, and Secure Code Warrior training mappings for remediation.
vulnerability · slcyber.io
High Fidelity Detection Mechanism for php2shell (CVE-2026-109618 and CVE-2026-109619)
The research team releases an open source tool php2shell-scanner which contains a high fidelity scanning mechanism to check for CVE-2026-109618 and CVE-2026-109619 across hosts.
vulnerability · eshard.com
[CVE-2023-20938] Kernel UaF to Root #1: Freeing an Object That’s Still in Use
A use-after-free in Android’s Binder driver, recorded once and replayed at will. Part 1 of a series building a full kernel exploit chain with time travel debugging.
Back